Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File:                     fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier:          fBxJcL/gbT3vWaptwE4for+MUGELtCcx8mCEsgtHtcU=
Subject key identifier:   12:47:20:32:81:83:CF:B8:8F:8B:A1:9F:C7:32:C2:73:12:C5:AC:24
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       01962F06687CE48819C30F6D608EBB40EA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
                          2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
                          3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: tjc4wJiWf+9WS2rFimj5ZYcxRZK0OKKMXP1gqQzIFrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:7c:e4:88:19:c3:0f:6d:60:8e:bb:40:ea:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=124720328183cfb88f8ba19fc732c27312c5ac24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:5d:b2:cb:32:f3:83:9e:c0:eb:b7:f9:19:
                    fe:d7:26:9f:13:bc:1c:50:11:83:e0:ea:03:c4:e0:
                    dc:d4:95:bc:fd:db:ee:f7:25:1f:94:c9:e4:6b:df:
                    15:b3:67:f8:f5:f8:3f:af:08:f2:3e:56:34:54:8a:
                    f2:37:c6:00:f3:00:ba:f6:b7:7f:39:5d:90:11:ac:
                    cc:c0:c3:02:f4:c0:07:ed:10:31:da:e7:37:21:2a:
                    b1:23:b0:d8:ea:0e:c3:cc:76:c2:f5:0b:27:f7:1f:
                    c4:4c:4a:78:bf:9f:61:be:48:eb:2f:f0:5c:95:42:
                    ad:8d:ef:05:51:be:53:7a:cb:18:84:4c:86:51:2b:
                    f9:65:b2:4d:02:4c:ef:4c:38:e1:7f:67:5c:72:2b:
                    8e:92:1a:6f:25:c6:06:bf:71:5e:41:83:cf:97:81:
                    ca:47:2f:06:5b:95:ea:3d:64:5d:c4:46:cd:19:44:
                    92:c2:91:b7:a1:96:55:25:56:72:9d:eb:ec:ad:45:
                    1b:c7:38:e4:cc:6a:d6:99:df:d1:a0:dd:0b:cd:b9:
                    e8:f5:01:e5:bd:fd:ea:ca:d6:70:09:32:5c:6a:39:
                    3a:85:a4:13:68:30:ba:0f:6b:b7:80:bb:d7:c7:a7:
                    05:96:a9:75:47:fc:36:95:c6:23:a5:ad:7a:81:08:
                    50:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:47:20:32:81:83:CF:B8:8F:8B:A1:9F:C7:32:C2:73:12:C5:AC:24
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0d:64:1a:c8:5b:ae:ee:6f:8d:b5:8f:bc:11:4e:c6:68:3e:
         6b:7f:53:dc:32:2a:3e:09:13:7f:02:c3:39:09:a5:01:6e:0b:
         4e:f6:32:6e:33:29:aa:cc:14:da:fd:4d:e8:c5:ac:ff:a2:a0:
         b8:fe:67:69:73:5c:57:fd:dc:8f:7d:7f:9a:7b:fe:f9:cd:58:
         f5:79:f4:4e:07:4e:1d:b7:20:29:56:e9:ac:e4:53:8a:98:10:
         1d:28:c8:cf:bd:ac:60:0c:73:03:ec:6e:fc:c3:42:e1:ed:76:
         ea:3f:1b:8b:c2:e8:12:51:69:ac:84:86:4f:c9:42:cb:0e:8d:
         9a:e4:e1:1e:47:6a:99:8d:e3:e0:60:ff:ec:98:7d:08:ab:3a:
         92:df:e2:d0:c4:0f:7a:33:b4:b8:30:df:c3:7e:88:3a:32:7a:
         60:c9:fc:7e:a3:b1:77:eb:c6:cf:8e:36:de:8b:1b:6a:2c:dc:
         3d:3e:26:82:27:ca:cf:14:61:78:2b:9a:91:42:f4:5f:1a:a1:
         fa:58:5f:c6:c6:79:16:aa:8a:6e:31:00:ca:09:0e:f4:eb:b4:
         23:40:83:1a:32:16:9d:f5:ba:e2:6c:65:25:10:08:11:e3:ec:
         6c:5e:2b:13:68:3b:3c:2e:a9:4e:d1:49:e9:f3:05:43:d8:87:
         fd:53:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----